Vuln Tracker

What problem does it solve?

Vuln Tracker prevents security disclosures and PRs created by vuln-scanner from silently rotting by auditing their daily lifecycle state and surfacing anything that needs operator attention.

Core Features & Use Cases

• Daily audit of scan outputs: Cross-references vuln-scanner history with live GitHub state to identify merged-but-not-aggregated wins, maintainer questions needing replies, and PRs that are too old to remain unattended.
• Coverage repair via GitHub search: Detects gaps where prior scan history may not include older bot PRs, then backfills by searching bot-authored security PRs for reliable lifecycle reporting.
• Operational dashboard updates: Rewrites the operator-facing memory/topics/vuln-followup.md dashboard with updated Stars Secured metrics and categorized queues (needs answer, newly actionable, stale/aging, queued, closed without merge, and more).

Quick Start

Ask your autonomous agent to run the Vuln Tracker daily to update memory/topics/vuln-followup.md and produce an operator notification only when there is meaningful movement or actionable items.